Timeline for Tor Exit Node Security & https website
Current License: CC BY-SA 3.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 2, 2018 at 9:09 | comment | added | forest | @L3n Tor Browser necessarily has to clear the HSTS cache on restart in order to reduce fingerprintability (as you can fingerprint a user by seeing if a given site is in the HSTS cache by timing the connection with JS), which limits its security, especially for short-lived browser sessions. Tor Browser does have the HTTPS Everywhere extension though, which helps for many popular sites. | |
| Nov 14, 2017 at 19:11 | comment | added | David Gomes | Keep in mind that the "downgrade" attack and self-signed cert. you describe are prevented by HSTS. | |
| Jan 4, 2017 at 3:52 | comment | added | George Y. | OpenVPN is one of them, but there are many alternatives. If you use your own scripts or a browser which supports SOCKS5, you can even use something like ssh tunnel (however in this case the server might be able to find out your real IP) | |
| Jan 4, 2017 at 3:48 | comment | added | Surendra Patil | Thank you. I have AWS account with active servers... I will try to run VPN software & check the results... By VPN software you mean OpenVPN ? | |
| Jan 4, 2017 at 3:43 | history | answered | George Y. | CC BY-SA 3.0 |